Skip to main content

HTTPS Certificates

For the GDPR-compliant use of GlobaLeaks, encryption via HTTPS is necessary.

Add Domain and Generate Certificate​

Good to know

As a customer of the OpenSource Whistleblower Portal, you will receive active assistance to set this up (a video call if available). Please contact Support.

Prerequisites​

To configure a domain in GlobaLeaks, the DNS-server for the desired hostname must already point to the IP address or CNAME of the GlobaLeaks server.

A hostname looks like this: hinweise.example.org.

note

After setup, it usually takes up to 60 minutes for your changes to propagate on the internet. You must wait for this.

Workflow in GlobaLeaks​

Good to know

In this workflow, you will create a certificate from Let's Encrypt. This is free for you, and the certificate will be automatically renewed.

  1. Go to Network > Tab HTTPS (selected by default). Enter your hostname and click Save. GlobaLeaks enter hostname

  2. GlobaLeaks will validate the DNS entry in the background and then indicate that the domain has been linked (if the DNS entry has already propagated). Select Continue in the Automatic Configuration option. GlobaLeaks automatic HTTPS configuration

  3. This process may take some time. GlobaLeaks automatic HTTPS configuration loading

  4. Any errors will be displayed as notifications. GlobaLeaks HTTPS configuration error

    If this happens to you:

    • First reload the page,
    • then Delete all stored keys (PEM),
    • click Reset, and
    • reload the page again.
    • Then start the process again.

    GlobaLeaks fix HTTPS configuration errors

  5. If the certificate generation is successful, you only need to click Activate. GlobaLeaks activate HTTPS certificate

Once the HTTPS certificate is activated, you will see the URL and certificates.

GlobaLeaks

Verify the successful setup by accessing the hostname in the browser.

GlobaLeaks